[Full-disclosure] MSIE Nested Object Vulnerability Is Exploitable

Hello, There has recently been some discussion regarding whether or not the MSIE Nested Object Vulnerability reported by Michal Zalewski is exploitable or not. Link to Michal Zalewski Full-Disclosure Posting: http://lists.grok.org.uk/pipermail/full-disclosure/2006- April/045422.html Because of...

Secunia Research: Servant Salamander unacev2.dll Buffer Overflow Vulnerability

====================================================================== Secunia Research 28/04/2006 - Servant Salamander unacev2.dll Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

[SA19686] Mac OS X Multiple Potential Vulnerabilities

TITLE: Mac OS X Multiple Potential Vulnerabilities SECUNIA ADVISORY ID: SA19686 VERIFY ADVISORY: http://secunia.com/advisories/19686/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote OPERATING SYSTEM: Apple Macintosh OS X http://secunia.com/product/96/ DESCRIPTION: Tom Ferr...

[SA19684] I-Rater Platinum "include_path" Parameter File Inclusion Vulnerability

TITLE: I-Rater Platinum "includepath" Parameter File Inclusion Vulnerability SECUNIA ADVISORY ID: SA19684 VERIFY ADVISORY: http://secunia.com/advisories/19684/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: I-Rater Platinum http://secunia.com/product/9425/ DESCRIPTIO...

[SA19631] Firefox Multiple Vulnerabilities

TITLE: Firefox Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19631 VERIFY ADVISORY: http://secunia.com/advisories/19631/ CRITICAL: Highly critical IMPACT: Security Bypass, Cross Site Scripting, Spoofing, Exposure of sensitive information, DoS, System access WHERE: From remote SOFTWARE: Mozilla...

[eVuln] QLnews XSS and PHP Code Insertion Vulnerabilities

New eVuln Advisory: QLnews XSS and PHP Code Insertion Vulnerabilities http://evuln.com/vulns/113/summary.html --------------------Summary---------------- eVuln ID: EV0113 CVE: CVE-2006-1575 CVE-2006-1576 Software: QLnews Sowtware's Web Site: http://www.vscripts.pl/ Versions: 1.2 Critical Level:...

[SA19563] MAXdev MD-Pro ADOdb "server.php" Insecure Test Script Security Issue

TITLE: MAXdev MD-Pro ADOdb "server.php" Insecure Test Script Security Issue SECUNIA ADVISORY ID: SA19563 VERIFY ADVISORY: http://secunia.com/advisories/19563/ CRITICAL: Moderately critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: MAXdev MD-Pro 1.x...

[SA19572] xzgv JPEG Image Parsing Heap Overflow Vulnerability

TITLE: xzgv JPEG Image Parsing Heap Overflow Vulnerability SECUNIA ADVISORY ID: SA19572 VERIFY ADVISORY: http://secunia.com/advisories/19572/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: xzgv 0.x http://secunia.com/product/4194/ DESCRIPTION: A vulnerability has...

[SA19531] OpenVPN LD_PRELOAD Environment Variable Pushing Vulnerability

TITLE: OpenVPN LDPRELOAD Environment Variable Pushing Vulnerability SECUNIA ADVISORY ID: SA19531 VERIFY ADVISORY: http://secunia.com/advisories/19531/ CRITICAL: Less critical IMPACT: System access WHERE: From remote SOFTWARE: OpenVPN 2.x http://secunia.com/product/5568/ DESCRIPTION: Hendrik Weime...

[SA19534] ClamAV Multiple Vulnerabilities

TITLE: ClamAV Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19534 VERIFY ADVISORY: http://secunia.com/advisories/19534/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: Clam AntiVirus clamav 0.x http://secunia.com/product/2538/ DESCRIPTION: Some vulnerabilities...

[SA19511] KGB Archiver Directory Traversal Vulnerability

TITLE: KGB Archiver Directory Traversal Vulnerability SECUNIA ADVISORY ID: SA19511 VERIFY ADVISORY: http://secunia.com/advisories/19511/ CRITICAL: Less critical IMPACT: System access WHERE: From remote SOFTWARE: KGB Archiver 1.x http://secunia.com/product/7033/ DESCRIPTION: A vulnerability has be...

msie-createTextRang-script.txt

shellcode =...

MS Internet Explorer (createTextRang) Download Shellcoded Expl (2)

Exploit for unknown platform in category remote exploits ===================================================================== MS Internet Explorer createTextRang Download Shellcoded Exploit 2 ===================================================================== / Internet Explorer "createTextRan...

Microsoft Internet Explorer - createTextRang Download Shellcode (2)

Microsoft Internet Explorer - createTextRang Download Shellcode 2 / Internet Explorer "createTextRang" Download Shellcoded Exploit 2 Bug discovered by Computer Terrorism UK http://www.computerterrorism.com/research/ct22-03-2006 Affected Software: Microsoft Internet Explorer 6.x & 7 Beta 2 Severit...

[SA19453] v-creator VCEngine.php Shell Command Injection Vulnerability

TITLE: v-creator VCEngine.php Shell Command Injection Vulnerability SECUNIA ADVISORY ID: SA19453 VERIFY ADVISORY: http://secunia.com/advisories/19453/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: v-creator 1.x http://secunia.com/product/9080/ DESCRIPTION: A...

Microsoft Internet Explorer - 'createTextRang' Download Shellcode (2)

/ Internet Explorer "createTextRang" Download Shellcoded Exploit 2 Bug discovered by Computer Terrorism UK http://www.computerterrorism.com/research/ct22-03-2006 Affected Software: Microsoft Internet Explorer 6.x & 7 Beta 2 Severity: Critical Impact: Remote System Access Solution Status: Unpatche...

[SA19435] VNews Multiple Vulnerabilities

TITLE: VNews Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19435 VERIFY ADVISORY: http://secunia.com/advisories/19435/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data, System access WHERE: From remote SOFTWARE: VNews 1.x http://secunia.com/product/9043/...

Microsoft Internet Explorer - 'createTextRang' Remote Code Execution

shellcode = unescape "%u9090%u9090%u9090%uC929%uE983%uD9DB%uD9EE%u2474" + "%u5BF4%...

MS Internet Explorer (createTextRang) Download Shellcoded Exploit

Exploit for unknown platform in category remote exploits ================================================================= MS Internet Explorer createTextRang Download Shellcoded Exploit ================================================================= / Internet Explorer "createTextRang" Downloa...

Microsoft Internet Explorer - createTextRang Download Shellcode (1)

Microsoft Internet Explorer - createTextRang Download Shellcode 1 / Internet Explorer "createTextRang" Download Shellcoded Exploit Bug discovered by Computer Terrorism UK http://www.computerterrorism.com/research/ct22-03-2006 Reliable exploitation by Darkeagle of Unl0ck Research Team...